Now compatible with Stripe Link for Agents

Give AI Agents
Spending Power
Without Losing Control

Policy-driven spending controls for OpenClaw, Hermes, and MCP agents. Local-first. Zero credential exposure. MIT licensed.

Install the Gateway See How It Works
37
Tests Passing
0
Payment Credentials Stored
MIT
Open Source License

Works with

How It Works

One Question Before Every Purchase

Before any money moves, the gateway asks: should this agent be allowed to spend this amount with this merchant right now?

actonce-spend — zsh
$ actonce-spend init
✓ Created actonce-policy.yaml
✓ Created data/ directory
$ actonce-spend check --amount 14.99 --currency GBP --merchant namecheap.com
"decision": "approved"
"approved_by": "auto"
"policy_matched": "trusted_merchant_under_limit"
$ actonce-spend check --amount 149.99 --currency GBP --merchant aws.amazon.com
"decision": "requires_approval"
"policy_reason": "Amount exceeds auto-approval limit"
The Problem

Words Aren't Guardrails

Agents Are Literal

"Buy a domain for the project" can mean the same domain twice. Or the wrong TLD. Or at 3am. Without policy, the agent does exactly what you say — not what you meant.

Prompts Get Forgotten

"Please be careful with spending" is not a safety mechanism. It is a suggestion that an agent can ignore, misinterpret, or forget across sessions.

Audit Trails Matter

When an agent spends money, someone will ask "why did it buy this?" You need a clear answer: the policy, the approval, the timestamp, and the reason.

Features

Policy-Driven. Local-First. Agent-Native.

Core

Policy Engine

Define spending rules in a simple YAML file. Amount limits, merchant allowlists, category blocks, business hours, and duplicate windows. The agent cannot override them.

max_single_purchase: 50.00
require_human_approval_above: 25.00
allowed_merchants:
  - namecheap.com
  - github.com
dedupe_window_minutes: 30
Safety

Duplicate Detection

SQLite-backed deduplication prevents the same purchase from happening twice within a configurable time window. No more double domain registrations.

Control

Human-in-the-Loop

When a purchase exceeds your threshold, the gateway queues it for approval. Get a Telegram alert, tap yes or no, and the agent proceeds or stops.

Integration

MCP-Native

Built as an MCP server for OpenClaw, Hermes, and any MCP-compatible agent. Integrates in minutes with a simple JSON config.

Privacy

Zero Credential Exposure

The gateway never sees your card, your token, or your Stripe credentials. It only emits decisions: APPROVED, REJECTED, or REQUIRES_APPROVAL.

Install in 30 Seconds

Get started with the open-source gateway today.

1

Install globally

npm install -g @actonce/spend-gateway
2

Initialize your policy

actonce-spend init
3

Connect to your agent

actonce-spend start --mcp
View Documentation

MIT License. Free forever for open-source use.

Pricing

Open Source First.
Paid When You Scale.

Free

$0/month

Open source. Self-hosted.

  • Local policy engine
  • MCP server + CLI
  • Duplicate detection
  • File-based approval queue
  • Telegram alerts (1 user)
  • Simulate / dry-run mode
  • MIT licensed
Get Started

Pro

$24/month

For solo builders.

  • Everything in Free
  • Hosted dashboard
  • 3 agents
  • 1,000 spend checks/month
  • Email/Telegram approvals
  • Basic logs
Subscribe

Team

$99/month

For agencies and startups.

  • Everything in Pro
  • 10 agents
  • 10,000 checks/month
  • Team approvals
  • Client/project tagging
  • Webhook integrations
Subscribe

Business

$299/month

For production use.

  • Everything in Team
  • Unlimited agents
  • Unlimited checks
  • Advanced fraud signals
  • Audit exports
  • Priority support
Subscribe
FAQ

Common Questions

No. The gateway is a decision engine only. It says yes, no, or wait. Stripe Link CLI or your preferred payment method handles the actual transaction.

No. The open-source version is entirely local. Policy files, logs, and the dedupe database live on your machine. No API keys, no external services.

Any MCP-compatible agent. Tested with OpenClaw and Hermes. Works with Claude Code, Cursor, and any framework that supports the Model Context Protocol.

Pro ($24/mo) adds the hosted dashboard, email/Telegram approvals, and 1,000 spend checks/month. Team ($99/mo) adds multi-user approvals, 10 agents, and webhook integrations. Business ($299/mo) is unlimited. Click Subscribe on any tier above.

The core gateway is open source under MIT license. You can use it, modify it, and redistribute it. The hosted Pro dashboard is a paid SaaS product for teams who need multi-user features.

Stripe gave agents a way to pay.

ActOnce gives them a way to be trusted.

Join the developers building safer agentic commerce.

Star on GitHub View Install Guide

Also from ActOnce

Seller Agent-Readiness Scanner

Is your store ready for AI agent buyers? Scan any ecommerce site and get an Agent-Ready Score in 60 seconds.

Run Free Scan →